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AMENDMENTS TO THE CLAIMS 

1 . (Original) A key maintenance method comprising: 
maintaining, in a datastore a first-level access key that grants, to a medical 
service provider, a level of access to a set of medical records of a patient; 

retrieving the first-level access key; and 

generating a second-level access key by modifying the level of access 
of the first-level access key. 

2. (Original) The key maintenance method of claim 1 wherein: 

the levels of access of the first-level and second-level access keys are 

defined using one or more access parameters; 

the set of medical records is a multi-portion medical record; and 

the access parameters provide access to one or more portions of the set 

of medical records. 

3. (Original) The key maintenance method of claim 1 further 
comprising transmitting the second-level access key to the medical service 
provider, wherein the medical service provider subsequently stores the second- 
level access key on an MSP key repository assigned to the medical service 
provider, 

4. (Original) The key maintenance method of claim 1 ftirther 
comprising storing the second-level access key in the datastore, 

5. (Original) The key maintenance method of claim 4 fuilher 
comprising deleting the first-level access key from the datastore. 

6. (Original) The key maintenance method of claim 4 wherein the 
datastore is a patient key repository assigned to the patient. 



7. (Original) The key maintenance method of claim 6 wherein the 
first-level access key was previously-provided to the medical service provider 
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and previously-stored on an MSP key repository assigned to the medical 
service provider. 

8. (Original) The key maintenance method of claim 7 w^herein: 
the patient key repositor>^ is a first portion of a centralized key 

repository; and 

the MSP key repository is a second portion of the centralized key 
repository. 

9. (Original) The key maintenance method of claim 8 wherein the 

centralized key repository resides on and is executed by a remote server 
connected to a distributed computing network. 

10. (Original) The key maintenance method of claim 9 wherein: 
the remote server is a web server; and 

the distributed computing network is the Intemet. 

1 1 . (Original) The key maintenance method of claim 7 flirther 
comprising reconciling the patient key repository and the MSP key repository, 

12. (Original) The key maintenance method of claim 1 1 wherein 

reconciling includes overwriting the first-level access key stored within the 
MSP key repository with the second-level access key stored in the patient key 
repository. 

1 3 . (Original) The key maintenance method of claim 1 wherein the 
second-level access key enhances the level of access of the first level access 
key, wherein the medical service provider is granted a greater level of access 
to the set of medical records of the patient. 

14. (Original) The key maintenance method of claim 1 wherein the 
second-level access key reduces the level of access of the first level access 
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key, wherein the medical sei^dce provider is granted a reduced level of access 
to the set of medical records of the patient. 

15. (Original) The key maintenance method of claim 1 w^herein the 
second-level access key revokes the level of access of the first level access 
key, wherein the medical service provider is prohibited from accessing the set 
of medical records of the patient. 

1 6. (Original) A key maintenance method comprising: 
maintaining, in a datastore, a first-level access key that grants, to a 

medical service provider, a level of access to a set of medical records of a 
patient; 

retrieving the first-level access key; 

generating a second-level access key by modifying the level of access 
of the first-level access key; and 

deleting the first-level access key from the datastore 

17. (Original) The key maintenance method of claim 16 wherein the 
datastore is a patient key repository assigned to the patient. 

1 8. (Original) The key maintenance method of claim 17 wherein the 

first-level access key was previously-provided to the medical service provider 
and previously-stored on an MSP key repository assigned to the medical 
service provider. 

19. (Original) The key maintenance method of claim 18 wherein: 
the patient key repository is a first portion of a centralized key 

repository; and 

the MSP key repository is a second portion of the centralized key 

repository. 



65209460. 1 



4 



Application No. 10/726,952 



Docket No.: 66729/P033US/10614705 



20. (Original) The key maintenance method of claim 19 wherein the 
centralized key repository resides on and is executed by a remote server 
connected to a distributed computing network. 

2L (Original) The key maintenance method of claim 20 wherein: 

the remote server is a web sei-ver; and 

the distributed computing network is the Internet. 

22. (Original) A key maintenance system comprising: 

a server system including a computer processor and associated 
memory, the server system having a centralized key repository and a 
centralized medical record repository; 

wherein the server system is configured to: 

maintain, in a datastore, a first-level access key that grants, to a 
medical service provider, a level of access to a set of medical records of a 
patient; 

retrieve the first-level access key; and 

generate a second-level access key by modifying the level of access of 
the first-level access key, 

23. (Original) The key maintenance system of claim 22 wherein the 
server system is further configured to store the second-level access key in the 
datastore. 

24. (Original) The key maintenance system of claim 23 wherein the 
datastore is a patient key repository assigned to the patient. 

25. (Original) The key maintenance system of claim 24 wherein the 
first-level access key was previously-provided to the medical service provider 
and previously-stored on an MSP key repository assigned to the medical 

service provider. 



26. (Original) The key maintenance system of claim 25 wherein: 
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the patient key repository is a first portion of a centralized key 
repository; and 

the MSP key repository is a second portion of the centralized key 
repository. 

27. (Original) The key maintenance system of claim 26 wherein the 
centralized key repository resides on and is executed by a remote server 
connected to a distributed computing network. 

28. (Original) The key maintenance system of claim 27 wherein: 
the remote server is a web server; and 

the distributed computing network is the Intemet. 

29. (Canceled) 

30. (Currently Amended) A computer program product residing on a 
computer readable medium having a plurality of instructions stored thereon 
which, when executed by [[the]] a processor, cause that processor to: 

maintain, in a datastore, a first-level access key that grants, to a 
medical service provider, a level of access to a set of medical records of a 
patient; 

retrieve the tirst-level access key; and 

generate a second-level access key by modifying the level of access of 
the fii'st-levei access key. 

3 1 . (Original) The computer program product of claim 30 further 
comprising instructions for storing the second-level access key in the 
datastore. 

32. (Original) The computer program product of claim 30 further 
comprising instructions for deleting the first-level access key fit'om the 
datastore. 
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33. (Original) The computer program product of claim 30 wherein the 
datastore is a patient key repository assigned to the patient. 

34. (Original) The computer program product of claim 33 wherein the 
first-level access key was previously-provided to the medical service provider 
and previously-stored on an MSP key repository assigned to the medical 
service provider. 

35. (Original) The computer program product of claim 34 further 

comprising instructions for reconciling the patient key repository and the MSP 
key repository. 

36. (Original) The computer program product of claim 35 wherein the 
instructions for reconciling include instructions for overwriting the first-level 
access key stored within the MSP key repository with the second-level access 
key stored in the patient key repository. 
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